I was curious too, so I looked into their Github issues. Apparently, SQLite doesn’t play well with k8s due to the distributed/networked nature of the environment. According to comments in the pull request, that seems to be the main driver. And apparently, Radarr already has a Postgres option.
Though, there are requests going back to 2017 to support it…just because, I guess? That person seems to just want all their data in one DB for some reason.
The article doesn’t list the infected site. So, if you want to keep yourself safe by avoiding it, well… fuck you, I guess.
Edit: just skimmed through the original Group-IB report and they redacted the name of the site. Not the article’s fault that millions of people are still in danger to this malware.